Show HN: Master SSH tunneling in an interactive lab A little over a year ago I gave away over 4,600 copies of my intro to SSH tunneling book, The Cyber Plumber's Handbook, for free over a 48 hour period to the awesome folks here on Hacker News (https://ift.tt/2y2jX0F). Since then, I've been getting a lot of feedback about creating an interactive lab where SSH tunneling and port redirection techniques can be practiced in real scenarios. With a bit more time during the quarantine, I finally found the time to launch the lab portion. For the HN family, I'm offering the book and 2 weeks of lab time for 50% off ($19.99) with this Gumroad link through May 30: https://ift.tt/2zss8aG Why learn SSH tunneling? SSH tunneling is a skill you can use for the rest of your IT career. SSH tunneling and port redirection are skills that can be applied in any information technology discipline, so it does not matter if you are a network engineer, red teamer, penetration tester, developer or something in between. That being said, the examples tend to skew towards pairing tunneling techniques with penetration testing tools (including Metasploit). Lab Overview Four jump boxes provide the Internet facing portion of the lab. However, the fun really starts when you start leveraging tunneling techniques to reach the internal side of the network to access services such as Secure SHell (SSH), Web, and Remote Desktop Protocol (RDP). The Linux and Windows targets are also running vulnerable services that can be exploited for the true tunneling ninjas. Each of the exercises has a brief description and solution to assist you in the event you get stuck. Happy Tunneling! Brennon May 23, 2020 at 09:54PM
Show HN: AWS-Powered Rube Goldberg Machine AWS has so many services—like more than most of us can name. What are some creative ways you can stitch them together to accomplish simple tasks in the most roundabout of ways? Get creative! This isn't about being practical! Here's a theoretical example of how to create a GIF! (Steps 4 through 998 are left as an exercise for creative readers!) 1. Add a new AWS IAM user, gif-creator, where each frame that will be part of the final GIF is base64 encoded and included as tag to the IAM user. 2. This triggers a CloudTrail event to be logged and published to Simple Notification Service. 3. Upon receiving this event, a lambda gets triggered that builds a Docker container that simply scans your domain for new DNS records. Additionally, the lambda spins up an entire Elastic Kubernetes Service (EKS) cluster with that Docker container. . . . 999. You now have a GIF in your inbox! April 6, 2020 at 02:10AM
Comments
Post a Comment